General

  • Target

    53d053a8d77eccb79be5310785061fb4_JaffaCakes118

  • Size

    78KB

  • Sample

    240729-vezqystbrg

  • MD5

    53d053a8d77eccb79be5310785061fb4

  • SHA1

    2847cc23b80329a03b8abebb7ef8ffa9d19343b6

  • SHA256

    6ebda126ec5c9eacb056d479a9362a179b851c20045b0820745e9bbe168cc364

  • SHA512

    8c1cfb9be044608cf1fbb88db108ec644ab58e763f93813e64b5930b33ffc7b636086ed14f99ef26dc46312fdf715fb4ac9f3dd7a2ec6c5fd2e5302bbe23157b

  • SSDEEP

    1536:WLLKmqKbERcG91gYj4exbccBgZHvWVsVQysXZ0wYaWD1eSwogB5zOG:c4Kb2rgYjMAVNyiTA1eRogBBOG

Score
10/10

Malware Config

Extracted

Family

asyncrat

Version

0.5.7B

Botnet

Default

C2

192.168.1.109:6606

192.168.1.109:7707

192.168.1.109:222

Mutex

AsyncMutex_6SI8OkPnk

Attributes
  • delay

    3

  • install

    false

  • install_folder

    %AppData%

aes.plain

Targets

    • Target

      53d053a8d77eccb79be5310785061fb4_JaffaCakes118

    • Size

      78KB

    • MD5

      53d053a8d77eccb79be5310785061fb4

    • SHA1

      2847cc23b80329a03b8abebb7ef8ffa9d19343b6

    • SHA256

      6ebda126ec5c9eacb056d479a9362a179b851c20045b0820745e9bbe168cc364

    • SHA512

      8c1cfb9be044608cf1fbb88db108ec644ab58e763f93813e64b5930b33ffc7b636086ed14f99ef26dc46312fdf715fb4ac9f3dd7a2ec6c5fd2e5302bbe23157b

    • SSDEEP

      1536:WLLKmqKbERcG91gYj4exbccBgZHvWVsVQysXZ0wYaWD1eSwogB5zOG:c4Kb2rgYjMAVNyiTA1eRogBBOG

    Score
    10/10
    • AsyncRat

      AsyncRAT is designed to remotely monitor and control other computers written in C#.

    • Async RAT payload

MITRE ATT&CK Matrix

Tasks